Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/583F47C01EB811F18CD447E9213D8C67.roa
File:                     583F47C01EB811F18CD447E9213D8C67.roa (raw, json)
Hash identifier:          Bjk5uPrLqxecopde9+bNQEC9OOCGDwJYP8K8SH4KKPY=
Subject key identifier:   37:56:80:9A:FE:08:DC:ED:EB:42:1C:E9:CC:24:BF:66:D6:B2:C7:46
Certificate issuer:       /CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
Certificate serial:       0419
Authority key identifier: 19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/583F47C01EB811F18CD447E9213D8C67.roa
Signing time:             Wed 05 Aug 2026 01:49:29 +0000
ROA not before:           Wed 05 Aug 2026 01:49:29 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     16276
IP address blocks:        103.189.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl
                          rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 00:25:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1049 (0x419)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917315B, serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
        Validity
            Not Before: Aug  5 01:49:29 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a7296a9-c89c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1b:4c:74:89:76:f8:0f:07:30:71:8a:50:b6:
                    70:1b:66:45:bb:14:43:94:f3:37:71:f7:51:92:90:
                    d8:06:f7:5c:19:d8:b6:76:94:07:a2:0b:92:d6:21:
                    02:44:22:9c:f6:71:c2:eb:f9:f7:ea:02:82:aa:5c:
                    c2:a5:4c:4e:a0:18:26:e1:15:48:9a:ac:34:60:8c:
                    32:be:28:ab:02:cc:09:57:b7:21:35:c8:70:16:cc:
                    92:c0:6a:c5:38:07:bb:98:c3:3d:a2:8e:b4:54:cf:
                    fd:16:ab:69:38:26:c0:8d:30:4d:fc:75:ad:37:53:
                    e9:d4:2a:82:84:dc:5e:65:7c:44:9d:11:60:96:e2:
                    ce:7c:64:41:a6:68:88:bf:11:eb:72:a3:28:24:3b:
                    4e:c8:5d:12:47:fa:4d:fe:7f:51:4a:cd:8d:f3:57:
                    d0:78:7b:43:ed:c5:a3:4a:d6:b5:a5:d2:b8:39:17:
                    f3:cf:22:8d:ff:63:36:4b:31:82:ce:f6:0d:22:88:
                    9a:26:88:c9:da:4e:7e:e9:e8:e1:40:34:45:cb:d0:
                    56:ab:dc:6d:99:50:9f:99:a4:ce:c0:b0:13:e4:ae:
                    b9:46:5a:03:43:23:03:b7:31:04:98:ee:c3:34:70:
                    a2:59:03:f2:2a:ba:1b:3a:57:79:e2:9f:4f:be:9b:
                    bd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:56:80:9A:FE:08:DC:ED:EB:42:1C:E9:CC:24:BF:66:D6:B2:C7:46
            X509v3 Authority Key Identifier:
                keyid:19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/583F47C01EB811F18CD447E9213D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:44:8e:f1:44:06:fd:7d:0b:2b:a1:de:82:e1:a6:77:bd:22:
         e7:49:20:be:83:59:cf:d9:cb:41:5f:6f:13:37:ac:a1:fe:5a:
         0e:6f:1b:e7:13:76:af:fc:fe:89:7c:96:a0:6c:05:90:c6:ba:
         8d:f3:74:c2:c7:2d:0c:cb:e3:7c:d4:54:f4:b3:25:9d:4d:4e:
         52:65:bf:4a:5f:55:f6:38:dd:af:51:36:fd:be:34:4d:aa:26:
         a6:76:66:01:23:e1:88:3c:70:cc:19:51:58:1e:5d:0b:17:fd:
         fc:f4:c0:6a:85:e9:fb:f7:8c:43:a8:43:45:bf:b4:42:58:cb:
         61:65:ce:1a:8a:a3:d6:b6:61:27:df:6f:9b:7f:ca:19:2d:a8:
         e7:02:24:30:0a:7e:71:51:0b:ca:78:ad:29:47:dc:11:e6:78:
         8c:dc:14:8b:28:74:f6:b8:54:97:71:4f:09:57:8b:78:03:95:
         2d:07:e9:e9:64:bc:b9:fd:93:c4:fd:ff:b1:40:8d:ee:c7:22:
         e7:bc:a2:f1:a2:ea:82:69:bd:c1:e8:f8:92:3d:d9:98:f0:9b:
         d7:75:82:85:d4:0a:5c:5a:4b:3b:86:8f:e3:e8:cc:78:b8:5e:
         73:0f:4c:01:6e:a7:b5:ed:b4:fa:e8:3b:14:93:da:66:44:16:
         1f:82:24:5b
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzMxNUIxMTAvBgNVBAUTKDE5NkY5Mjc3MzI5M0U0OTU0QjREOTdBNUQzN0FDODIw
QTc0NUMyRTAwHhcNMjYwODA1MDE0OTI5WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTcyOTZhOS1jODljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsBtMdIl2+A8HMHGKULZwG2ZFuxRDlPM3cfdRkpDYBvdcGdi2dpQHoguS1iEC
RCKc9nHC6/n36gKCqlzCpUxOoBgm4RVImqw0YIwyviirAswJV7chNchwFsySwGrF
OAe7mMM9oo60VM/9FqtpOCbAjTBN/HWtN1Pp1CqChNxeZXxEnRFgluLOfGRBpmiI
vxHrcqMoJDtOyF0SR/pN/n9RSs2N81fQeHtD7cWjSta1pdK4ORfzzyKN/2M2SzGC
zvYNIoiaJojJ2k5+6ejhQDRFy9BWq9xtmVCfmaTOwLAT5K65RloDQyMDtzEEmO7D
NHCiWQPyKrobOld54p9Pvpu95wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDdWgJr+
CNzt60Ic6cwkv2bWssdGMB8GA1UdIwQYMBaAFBlvkncyk+SVS02XpdN6yCCnRcLg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzE1Qi9ENzM1QTNCNEVE
NEIxMUVDQTk1NTM3NzhDNEY5QUUwMi9HVy1TZHpLVDVKVkxUWmVsMDNySUlLZEZ3
dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dXLVNkektUNUpWTFRaZWwwM3JJSUtkRnd1QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzMxNUIvRDczNUEzQjRFRDRCMTFFQ0E5NTUzNzc4QzRGOUFFMDIvNTgzRjQ3QzAx
RUI4MTFGMThDRDQ0N0U5MjEzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ72/MA0GCSqGSIb3DQEBCwUAA4IBAQACRI7xRAb9fQsrod6C4aZ3
vSLnSSC+g1nP2ctBX28TN6yh/loObxvnE3av/P6JfJagbAWQxrqN83TCxy0My+N8
1FT0syWdTU5SZb9KX1X2ON2vUTb9vjRNqiamdmYBI+GIPHDMGVFYHl0LF/389MBq
hen794xDqENFv7RCWMthZc4aiqPWtmEn32+bf8oZLajnAiQwCn5xUQvKeK0pR9wR
5niM3BSLKHT2uFSXcU8JV4t4A5UtB+npZLy5/ZPE/f+xQI3uxyLnvKLxouqCab3B
6PiSPdmY8JvXdYKF1ApcWks7ho/j6Mx4uF5zD0wBbqe17bT66DsUk9pmRBYfgiRb
-----END CERTIFICATE-----
Generated at Fri Sep 11 15:34:36 2026 by rpki-client